
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
File: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft (raw, json)
Hash identifier: gZmXbQ2Q3V6HYC6qYfbrBYPcE/e3cB8TYvIkL7ITm1g=
Subject key identifier: EA:FE:8D:4A:5A:31:07:C1:6A:E9:E3:5D:74:B6:C4:33:2B:69:E1:EA
Authority key identifier: DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
Certificate issuer: /CN=A91C5727/serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
Manifest number: 65
Signing time: Wed 25 Mar 2026 07:12:02 +0000
Manifest this update: Wed 25 Mar 2026 07:12:02 +0000
Manifest next update: Wed 01 Apr 2026 07:12:02 +0000
Files and hashes: 1: 3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl (hash: 0Ri6yOyyx9zpy797WX0YAu5LMxwIlnC5EPG8BZ85vmg=)
2: 54338F04B19111F0A5C55920C4F9AE02.roa (hash: V/ROTYiAWlfDNKJDyzimGDSU/zV095uMCoZBm78i66s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5727, serialNumber=DE6CDA69AB1AC89AE75F765CE77273E11B7FD67E
Validity
Not Before: Mar 25 07:12:02 2026 GMT
Not After : Apr 1 07:12:02 2026 GMT
Subject: CN=69c38ac2-eee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:2e:d7:6f:54:08:b2:07:0d:d6:34:15:9e:
90:85:ab:ca:9e:89:c8:b0:d1:26:4d:ba:a8:37:11:
31:eb:56:31:05:b1:df:37:4f:26:d5:19:13:4e:6d:
f1:8f:bb:af:9d:8f:a6:c7:84:69:32:e7:64:4d:67:
36:b6:ab:b3:c5:8a:9d:13:ef:05:97:40:c9:34:4d:
2e:e8:2c:9f:f5:ac:a2:23:fd:e9:ab:62:f3:f3:79:
ed:be:07:e6:e9:0f:b8:2f:d2:f0:e5:a0:e4:cb:98:
94:15:c3:9c:38:a3:17:c6:8c:b1:34:6b:99:e1:41:
0a:f4:6b:db:f5:ac:93:dc:96:55:0c:dd:dd:74:6d:
39:fe:88:bb:36:b6:b3:e3:76:7e:b8:b3:f3:08:2d:
71:e1:53:16:e3:cd:62:02:17:6e:68:40:64:31:18:
f3:9d:96:28:fe:ff:d5:1b:27:ff:76:1d:d4:51:1c:
72:ee:ef:49:d0:93:74:b3:ba:de:c3:56:52:cb:67:
8c:c0:d3:47:c4:a3:35:32:cd:39:b9:a6:2b:a9:39:
bd:0b:4b:cb:09:52:e4:16:1c:fd:3d:87:7a:96:22:
df:fc:8b:fb:41:20:08:0c:55:47:21:79:62:3b:78:
3d:8f:78:9b:1d:a6:43:bb:88:5d:e5:92:a0:35:a6:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:8D:4A:5A:31:07:C1:6A:E9:E3:5D:74:B6:C4:33:2B:69:E1:EA
X509v3 Authority Key Identifier:
keyid:DE:6C:DA:69:AB:1A:C8:9A:E7:5F:76:5C:E7:72:73:E1:1B:7F:D6:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mzaaasayJrnX3Zc53Jz4Rt_1n4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5727/2543244C920711F0A837414CC4F9AE02/3mzaaasayJrnX3Zc53Jz4Rt_1n4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:fe:c9:1f:7f:c5:3f:36:a2:96:42:f1:55:b8:cb:c0:a8:
e0:52:e9:62:28:91:91:8e:96:5c:dc:9a:13:ed:06:c8:a0:b9:
07:85:09:e7:c6:ac:7e:71:e8:4c:ac:c7:26:55:95:fe:2b:dc:
72:9c:3f:39:2d:cf:eb:91:71:b4:1b:bc:c4:d0:16:e5:c8:7a:
53:c4:4e:8b:27:32:28:90:50:c4:81:2a:7b:ea:14:0f:22:87:
d6:24:69:cc:91:cf:d9:4d:e2:96:a7:69:3a:44:0d:95:49:c4:
fe:81:59:25:6b:d7:13:22:63:e9:f3:ae:47:a1:60:c9:f3:05:
34:3b:c3:1a:07:da:97:0a:75:4b:7a:38:b3:87:50:cc:2b:0f:
55:64:4b:f7:b1:25:86:1e:d0:6a:0e:4b:64:cc:25:4d:80:a3:
88:dd:23:db:f4:c6:cd:30:fe:e3:0b:07:63:ff:94:f5:a8:ee:
77:2c:d7:63:18:ab:fc:44:08:99:d4:4b:73:c8:9e:d4:9d:8a:
b8:21:eb:ce:5f:74:c4:b1:ef:9e:6f:52:f0:75:1c:2e:27:9b:
8a:f3:15:90:f1:40:e1:a1:31:a5:17:79:4a:2c:75:4e:b6:8f:
af:bb:bf:fb:4b:d2:7f:72:cf:1f:4b:29:e6:8c:2b:cd:53:04:
32:fc:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:06 2026 by rpki-client